auto-deleting dates? why, how, who? undelete messages?

[Daniel Hoffend]

Hello Matthias

here're some of my personal notes regarding undeleting messages and 
folders


Single Mails
------------

Find correct folder

     kolab lm user/john*@example.org

List deleted mails from user/folder

     su - cyrus -c "/usr/lib/cyrus-imapd/unexpunge -l 
user/john at example.org"
     su - cyrus -c "/usr/lib/cyrus-imapd/unexpunge -l 
user/john/Trash at example.org"

Restore Single Mail

     su - cyrus -c "/usr/lib/cyrus-imapd/unexpunge -u -d -v 
user/john/Trash at example.org 1234"

Restore all deleted messages

     su - cyrus -c "/usr/lib/cyrus-imapd/unexpunge -a -d -v 
user/john/Trash at example.org"


Restore Deleted Folders
-----------------------

List all deleted folders/mailboxes

     kolab list-deleted-mailboxes

     > DELETED/user/john/Ham/529F39E5 at dotlan.net (Deleted at 2013-12-04 
15:19:17)

the 529F39E5 name is hex-encoded unixtimestamp

     # perl -le 'print scalar(localtime(hex("529F39E5")));'
     Wed Dec  4 15:19:17 2013

Undelete folder

     kolab undelete-mailbox DELETED/user/john/Ham/529F39E5 at example.org


Clear Cache
-----------

After modifying the storage system it might be usefull to clear the 
mysql cache roundcube and iRony (*DAV) are using.

     cd /usr/share/roundcubemail
     plugins/libkolab/bin/modcache.sh

TBH. I haven't tested this for calendar and adressbook entries.


Atm there's no way to find out who deleted a message with the cyrus 
tools. I know that there's a module called "Bonnie" for Kolab which is 
the solution of for logs mail logs and cyrus events broadcasts to 
archive the changes (exactly what you were looking for). But tbh. 
there's no one-stop-setup docs for bonnie yet. And I haven't seen it in 
action.

You can find more about it here:
https://docs.kolab.org/architecture-and-design/bonnie.html
https://github.com/kolab-groupware/bonnie



--
Hope that helps
Daniel



------ Originalnachricht ------
Von: "Matthias Busch" <catwiesel at gmx.net>
An: users at lists.kolab.org
Gesendet: 02.03.2015 20:20:27
Betreff: auto-deleting dates? why, how, who? undelete messages?

>Hi,
>
>I seem to have lost dates in a calendar. but why, how and if it was a 
>user error, who?
>
>I have three users, lets call them Child, Mother, Father
>
>user Child has three calendars:
>"Calendar Child" and two sub-calendars "School" and "Private"
>
>"Calendar Child" and "School" are both shared with Mother and Father 
>(full access)
>"Private" is not shared
>
>"Child" has had no way of logging in.
>
>Mother and Father have created dates in "Calendar Child" and "School"
>
>Now Mother informs me (Father) that some dates (at least "Homework") 
>have gone missing. I can not remember deleting any messages myself. 
>Neither can mother...
>
>When looking (imap) into the folder Calendar Child/School I can see two 
>mails/kolab xmls.
>When looking in 
>/var/spool/imap/domain/d/domain.tld/c/user/child/Calendar Child/School 
>I can see ~20 messages (11. - 37.) as well as the cyrus.* files
>
>cat *. | grep "Homework" I get 4 hits with <text>Homework</text>
>
>(4 dates seem to be what we expect to see. any they were in the near 
>future, not long past)
>
>Now, so far I deduce the following:
>the kolab-mails with the actual dates have been marked deleted.
>the calendar will not show the dates because they are "gone"
>
>in the webmail interface I can not browse that folder (with "hide 
>deleted messages" disabled)
>with thunderbird I can not figure out how to show deleted messages
>
>now, questions:
>- can I find out when the messages have been deleted?
>- can I find out who deleted them, possible how?
>- how can I undelete messages via command line? (the cyrus command 
>unexpunge seems not to work)
>
>- whats up with kolab examine-message? how does it want the 
>folder/message parameter?
>
>---
>
>I love kolab and all and right now, I have no reason to believe that 
>this is NOT a user error. But I really would like to get to the bottom 
>of this. I can not have a system that deletes messages on its own...
>
>
>
>_______________________________________________
>users mailing list
>users at lists.kolab.org
>https://lists.kolab.org/mailman/listinfo/users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5595 bytes
Desc: not available
URL: <http://lists.kolab.org/pipermail/users/attachments/20150303/e336c3bb/attachment.bin>